They're likely going to target two datacenters, not the datacenters + your medium sized company's office NAS and the safe in the office manager's home.
(Encryption handles confidentiality concerns.)
(Encryption handles confidentiality concerns.)
Which is why data residency is such a stupid concept.
There is nothing to say that a determined adversary may still get at your data so it needs to stay in country.